GDPR implementation bills: The election problem
It is by now no secret that a lot of EU countries won’t have implementing acts ready in time for […]
EU
Yahoo fine highlights issue of intra-group data processing compliance
The EU-based arms of major international businesses must have contracts in place with other group companies where those other companies […]
UK Privacy Regulator Open to Self-Certification under GDPR
Organizations in Europe may eventually be able to self-certify that they are compliant with the EU’s General Data Protection Regulation, […]
How to approach DPIAs under the GDPR
A DPIA consists of a procedure aimed at describing the treatment, assessing its necessity and proportionality, and facilitating the management […]
Bulgarian Presidency Presents Progress Report and Points for Debate on ePrivacy
On January 10, 2017, the EU Commission adopted a proposal for a Regulation on Privacy and Electronic Communications. On June […]
Irish data chief finds Yahoo broke EU law in breach
Irish Data Protection Commission (DPC) issued a statement that Yahoo broke EU law by failing to protect user information in […]
Cybersecurity certification framework backed by EU law makers
Manufacturers of connected cars and medical devices will be among the businesses able to obtain an EU-wide certificate that their […]
GDPR certifications come into focus with EDPB guidance
Last week, on GDPR Day, as the law finally came into force, the newly minted European Data Protection Board shed […]
GDPR harmonization: Reality or myth?
One primary goal in the EU’s enactment of the General Data Protection Regulation was to “harmonize,” or bring into conformity […]
EU Commission rejects UK’s approach for personal data transfers
The UK Government’s Brexit policy assumes that the Data Protection Act 2018 is good enough to obtain an adequacy determination […]
CJEU ruling causes “difficulty for fan page operators in fulfilling all data protection obligations”
7 June 2018 The Court of Justice of the European Union (‘CJEU’) issued, on 5 June 2018, its ruling (‘the […]
First court decision on GDPR
Only five days after the GDPR became applicable, the first German court, the Regional Court ( Landgericht ) Bonn (in […]